Senior Cyber Security Engineer (ITSecOps)

ABOUT CODEWAY

Codeway is a global consumer tech company with more than 400M users worldwide.
Since 2020, we’ve built and scaled 60+ mobile apps across creativity, productivity, wellness, language learning, and entertainment.

Our flagship apps — Retake AI, Cleanup, Learna, and DramaPops — and many of them lead their categories globally. In 2024, we became the most downloaded app publisher on iOS, driven by cutting-edge AI research, sharp data-driven execution, and a relentless focus on product and marketing.

We’re a team of 300+ people across İstanbul and Barcelona who bring curiosity, passion, trust, and ownership to everything we build. Recognized as a #1 LinkedIn Top Startup and a Great Place to Work in Europe, Codeway is where ambitious people do their life’s best work.

We’re building the next generation of consumer tech and reimagining what mobile apps can be.

This is Codeway. This is our way. Join us.

POSITION

We are looking for a hands-on Senior Cyber Security Engineer to establish and lead Codeway’s IT Security Operations (ITSecOps) function. This role will initially work directly with the IT leadership to design and implement core security infrastructure and processes.

The ideal candidate combines strong technical expertise (MDM, EDR, SIEM, NAC, endpoint and network security) with strategic thinking and the ability to build systems from scratch in a fast-growing environment.

WHAT YOU'LL BE DOING

Security Infrastructure & Architecture
· Lead the implementation and ongoing management of MDM, EDR/XDR, SIEM, and NAC solutions.
· Design and continuously improve endpoint and network security architecture.
· Define and operationalize logging, monitoring, alerting, and incident response workflows.
· Integrate security tools seamlessly with existing IT and infrastructure systems.
Security Operations (SecOps)
· Establish and manage incident detection and response processes.
· Own and drive the vulnerability management lifecycle.
· Implement and oversee patch management security controls.
· Define and enforce endpoint hardening standards.
· Develop and maintain internal security policies and technical standards.
· Conduct regular risk assessments and security reviews.
· Manage third-party security vendors, tools, and service providers.
Governance & Compliance
· Support internal and external audits and compliance initiatives (e.g., ISO 27001, SOC 2).
· Maintain up-to-date documentation, security procedures, and operational playbooks.

WHAT YOU'LL BRING

· Degree in Computer Engineering, Information Systems, Cyber Security, or a related field.
· 5–8+ years of experience in IT Security, Security Operations, or Infrastructure Security.
· Proven hands-on experience implementing and managing MDM, EDR/XDR, SIEM, and NAC solutions.
· Experience building and scaling security processes and infrastructure from scratch is highly preferred.
· Prior experience in fast-scaling technology companies is a strong advantage.
· Strong expertise in endpoint security and network security fundamentals.
· Solid experience in log management, correlation, and threat detection & incident response.
· Good understanding of Identity & Access Management (IAM) principles and practices.
· Familiarity with scripting (Bash, Python) and core infrastructure concepts such as VPNs, firewalls, and network segmentation.

Nice to Have

· Relevant security certifications (e.g., CISSP, CISM, CEH, or similar).
· Hands-on experience supporting or leading ISO 27001 and/or SOC 2 implementation initiatives.
· Proven experience establishing or scaling a SOC or SecOps function.

WHAT'S IN IT FOR YOU

· Great Place to Work. As our top team member, you'll be a part of a fast-growing startup and have the privilege to enjoy our accredited “BEST WORKPLACES” environment, ranked first among all workplaces.
· A Competitive Compensation Package. Long story short, we take care of you.
· A Meal Compensation that is actually enough for a decent & nutritious lunch, we’re not following the industry standard.
· Full Health Benefits. To keep you away from all the trouble, we provide unlimited private health insurance and cover the HPV vaccine.
· Pet Adoption Support. We cover the primary healthcare expenses, parasite vaccinations, and microchip costs that may arise within the first year after employees adopt a pet.
· Cool Tech Stack. Macbook, iPhone 15 Pro, magic mouse, magic keyboard; an adjustable desk with a 4K screen and any other gadget you may need in your job.
· Sport Activities Support. We care about your physical wellbeing and support your gym membership.
· Learning Never Ends! Training budget to help you grow in your role, gain new skills, and learn new things!
· Udemy Free Pass. An unlimited Udemy subscription.
· Flexible Schedule & Unlimited Vacations. This isn’t a “clock in, clock out” company. We care about your productivity, not tracking every minute you’re on site. It’s up to you to always be responsible with your work, no matter where you are or what schedule you’re keeping.
· English Course Support. Be more global and perform best at your work.
· Comprehensive Well-being Support. Through our partnership with Meditopia, we now offer free psychological counseling, along with additional services like dietitian, personal trainer, parenting consultant, physiotherapist, child & adolescent therapist, and face-to-face counseling for employees in Istanbul.
· A Top-Notch Office. Located at the heart of Istanbul, right next to Levent Metro Station at Ferko Signature.
· Codebrew. Yes, you’ve heard it right: We love coffee so much that we’ve built our own coffee shop inside our office, where we also provide healthy snacks at certain hours.
· Free Breakfast. At Codebrew - every morning at 9:30 AM.
· No Dress Code. Dress as you like.
· Happy Hours Every Friday. Every. Single. Friday. When it’s 5 PM: Screens off, party on! (Check out Codeway on Instagram)
· Dream Team. Average Codeway member is young, talented, and passionate - which makes our working environment extremely dynamic. Need proof? Take a look at our Instagram.
· Gaming Area. Whenever you need to take a break from hard work and relax with your favorite games, our PS5 corner will be waiting for you.
· Software Support. Subscription to any software you might need to perform at your best.
· Public Transportation Support. Daily public transportation support is on us, covered by an additional monthly compensation.
· Parent Support. Becoming a parent is a big moment, and Codeway celebrates it with you. We offer a one-time grant to support our new parents.
· Massage Room. When you need a moment to recharge and unwind, our massage chair room will be ready to offer you a relaxing break.

THE RECRUITING PROCESS

Application → Recruiter Interview → Case Study → Hiring Manager Interview → Final Executive Interview→ Offer

Your personal data that will be collected through your applications made due to this advertisement will be processed automatically by the data controller Codeway in accordance with the Personal Data Protection Law No. 6698 ("KVKK") and relevant legislation for the purpose of conducting job application processes. You can access detailed information on this matter from the "Candidate Information Notice"page at https://www.codeway.co. Codeway processes the personal data of job applicants in accordance with relevant legislation. "Privacy Notice for Employee Candidate" summarizes the data processing procedures during the application process.

Bu ilan sebebiyle yapacağınız başvurular aracılığıyla toplanacak kişisel verileriniz veri sorumlusu Codeway tarafından 6698 sayılı Kişisel Verilerin Korunması Kanunu (“KVKK”) ve ilgili mevzuat kapsamında iş başvuru süreçlerinin yürütülmesi amacıyla otomatik yollarla işlenecektir. Detaylı bilgiye https://www.codeway.co adresindeki "Aday Aydınlatma Metnimizin" sayfasından ulaşabilirsiniz. Codeway, iş başvurusu yapan adayların kişisel verilerini, ilgili mevzuat çerçevesinde işlemektedir. "Çalışan Adayı İçin Gizlilik Bildirimi"başvuru sürecindeki veri işleme süreçlerini özetler.